← Vulnerability feed

Vulnerability record · CVE-2019-10056 · published 28 August 2019

CVE-2019-10056: Suricata-ids suricata out-of-bounds write vulnerability

SSuricata Ids · Suricata

An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn't determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.

7.5 CVSS 3.0 High EPSS 1.4% · top 28.1% CWE-787 · Out-of-bounds write
7.5CVSS 3.0 base score, v2 5.0
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn't determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://redmine.openinfosecfoundation.org/issues/2946 ExploitIssue TrackingThird Party Advisory
https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/ Not ApplicableRelease NotesVendor Advisory
https://redmine.openinfosecfoundation.org/issues/2946 ExploitIssue TrackingThird Party Advisory
https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/ Not ApplicableRelease NotesVendor Advisory

Track CVE-2019-10056 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-16411Suricata-ids suricata out-of-bounds read vulnerabilityAn issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimestamp in d…EPSS 2.0%9.8CVE-2019-10053Suricata-ids suricata out-of-bounds read vulnerabilityAn issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function SSHParseBanner is composed only of a \n character, then the prog…EPSS 1.7%9.1CVE-2019-16410Suricata-ids suricata out-of-bounds read vulnerabilityAn issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a …EPSS 2.1%9.1CVE-2019-15699Suricata-ids suricata out-of-bounds read vulnerabilityAn issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHello…EPSS 1.6%7.5CVE-2019-10055Suricata-ids suricata integer overflow vulnerabilityAn issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a crash within …EPSS 1.5%7.5CVE-2019-10054Suricata-ids suricata improper input validation vulnerabilityAn issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.data. It causes an invalid memo…EPSS 1.4%7.5CVE-2019-10052Suricata-ids suricata vulnerabilityAn issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. …EPSS 2.1%7.5CVE-2019-10051Suricata-ids suricata vulnerabilityAn issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { ft.new_chunk }" item, then the …EPSS 2.1%

Source: NIST National Vulnerability Database (record CVE-2019-10056), CISA KEV, FIRST EPSS (scores of 2026-10-14). This page is refreshed as NVD updates the record.